Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveAdobeCVE-2016-4185
HistoryJul 13, 2016 - 1:59 a.m.

CVE-2016-4185

2016-07-1301:59:54
CWE-787
adobe
web.nvd.nist.gov
55
cve-2016-4185
adobe flash player
arbitrary code execution
denial of service
memory corruption
security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.03

Percentile

91.1%

JSON

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Affected configurations

Nvd
Node
adobeflash_player_desktop_runtimeRange≤22.0.0.192
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
Node
adobeflash_playerRange≤18.0.0.360esr
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
Node
adobeflash_playerRange≤22.0.0.192chrome
AND
applemac_os_xMatch-
OR
googlechrome_osMatch-
OR
linuxlinux_kernelMatch-
OR
microsoftwindowsMatch-
Node
adobeflash_playerRange≤22.0.0.192edge
OR
adobeflash_playerRange≤22.0.0.192internet_explorer
AND
microsoftwindows_10Match-
OR
microsoftwindows_8.1Match-
Node
adobeflash_playerRange≤11.2.202.626
AND
linuxlinux_kernelMatch-
VendorProductVersionCPE
adobeflash_player_desktop_runtimecpe:/a:adobe:flash_player_desktop_runtime::::

Related

redhatcve 33
prion 33
ubuntucve 33
cvelist 33
nvd 33
cve 32
openvas 2
redhatcve
redhatcve
CVE-2016-4189
2016-07-13 08:22:29
CVE-2016-4237
2016-07-13 08:25:53
CVE-2016-4240
2016-07-13 08:23:15
prion
prion
Memory corruption
2016-07-13 02:00:00
Memory corruption
2016-07-13 02:00:00
Memory corruption
2016-07-13 01:59:00
ubuntucve
ubuntucve
CVE-2016-4188
2016-07-13 00:00:00
CVE-2016-4217
2016-07-13 00:00:00
CVE-2016-4221
2016-07-13 00:00:00
cvelist
cvelist
CVE-2016-4181
2016-07-13 01:00:00
CVE-2016-4172
2016-07-13 01:00:00
CVE-2016-4217
2016-07-13 01:00:00
nvd
nvd
CVE-2016-4184
2016-07-13 01:59:53
CVE-2016-4181
2016-07-13 01:59:50
CVE-2016-4218
2016-07-13 02:00:26
cve
cve
CVE-2016-4184
2016-07-13 01:59:53
CVE-2016-4235
2016-07-13 02:00:42
CVE-2016-4190
2016-07-13 01:59:59
openvas
openvas
Adobe Flash Player Security Update (APSB16-25) - Windows
2016-07-13 00:00:00
Adobe Flash Player Within Google Chrome Security Update (APSB16-25) - Linux
2017-03-17 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.03

Percentile

91.1%

JSON
Related for CVE-2016-4185
redhatcve33prion33ubuntucve33cvelist33nvd33cve32openvas2